What is a benefit of using Cisco FMC over Cisco ASDM?
What is a benefit of using Cisco FMC over Cisco ASDM?
Cisco FMC provides centralized management, meaning that it allows administrators to manage multiple firewall devices from a single console. This improves efficiency and reduces the potential for errors that can occur when managing multiple devices individually. In contrast, Cisco ASDM is a device-specific management tool that only manages a single Cisco ASA device at a time.
its B.FMC cannot manage ASA
Let's not complicate the question. Main questions is "what is the benefit". FMC does provide centralized management of FTDs/FirePOWER service(note that FMC cannot manage ASA) while ASDM can only manage one ASA w/ FirePOWER service at a time.
B is correct. FMC allows for centralized management of many devices e.g if there is several firepower NGFW devices, they can be managed via a single FMC device whereas ASDM can only manage a single appliance.
B:Cisco FMC provides centralized management, meaning that it allows administrators to manage multiple firewall devices from a single console. This can improve efficiency and reduce the potential for errors that can occur when managing multiple devices individually. Cisco ASDM, on the other hand, is a device-specific management tool that can only be used to manage a single Cisco ASA device at a time.
But if by centralized management they mean managing IPS, AVC, AMP and all other security components then of course it is B
I think B is more appropriate. Because ASA is not used for centralized management for all firewalls but only for a ASA management.
Am I the only one who has already managed several ASAs via ASDM? “Managing multiple ASAs” is not another definition of “centralized management”? Although, I agree, the possibility of a new “centralized management” apparatus is a far cry from what ASDM proposes. B says "Cisco ASDM does not" Regarding this, D seems the correct one
B is correct
Disagree about D, FMC doesn't support firewalls running ASA code, it has to be FTD only. The term "centralized management" is vague. What do they mean by it? Managing more than one device ? You can manage more than one ASA from ASDM by the way. But you can't push configuration from ASDM to ASA, it's instantaneous change without going through "Deploy/push" procedure. I'm not sure if it is a benefit or not, to me rather architectural feature. So I'm inclined to think it is C
D should be it. Both ASA and FMC are being used for centralized management.
Need to be careful in reading the choices. Note that FMC can only manage FirePOWER services of ASA (not the ASA) and Firepower appliance onboarded with FTD.
connection manager in ASDM i dont think would be considered CM as you have to relogin to each firewall you want to manage
You need CSM to manage multiple ASA. ASDM cant manage multiple ASA.